[Openstack] [NEUTRON][DHCP] iptables chain rate limit dhcp connection

Davide Panarese dpanarese at enter.eu
Fri Dec 30 16:36:50 UTC 2016


Hello everyone,
anyone know where is the source code of neutron that create seguent CHAIN in iptables into dhcp namespaces?

-A INPUT -p udp -m udp --dport 67 -m hashlimit --hashlimit-above 5/min --hashlimit-burst 5 --hashlimit-mode srcip --hashlimit-name LIMIT_DHCP_UDP -j DROP
-A INPUT -p tcp -m tcp --dport 67 -m hashlimit --hashlimit-above 5/min --hashlimit-burst 5 --hashlimit-mode srcip --hashlimit-name LIMIT_DHCP_TCP -j DROP

Thanks a lot

Davide



More information about the Openstack mailing list